diff --git a/Chart.yaml b/Chart.yaml
index 3faa272..74f1225 100644
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -1,4 +1,4 @@
 apiVersion: v1
 name: pgdog
-version: v0.86
+version: v0.87
 appVersion: "v0.1.60"
diff --git a/templates/secrets.yaml b/templates/secrets.yaml
index f0dfa5e..4ee58b2 100644
--- a/templates/secrets.yaml
+++ b/templates/secrets.yaml
@@ -50,6 +50,9 @@ server_lifetime = {{ .serverLifetime }}
 {{- if .serverAuth }}
 server_auth = {{ .serverAuth | quote }}
 {{- end }}
+{{- if .serverIamAssumeRole }}
+server_iam_assume_role = {{ .serverIamAssumeRole | quote }}
+{{- end }}
 {{- end }}
 {{- end -}}
 
diff --git a/test/values-aws.yaml b/test/values-aws.yaml
index c00d24c..0cefba8 100644
--- a/test/values-aws.yaml
+++ b/test/values-aws.yaml
@@ -3,3 +3,9 @@ service:
   aws:
     enabled: true
     scheme: internet-facing
+
+users:
+  - name: app_user
+    database: primary
+    serverAuth: rds_iam
+    serverIamAssumeRole: "arn:aws:iam::123456789012:role/pgdog-rds-connect"
diff --git a/values.yaml b/values.yaml
index d51636b..7adacd8 100644
--- a/values.yaml
+++ b/values.yaml
@@ -253,6 +253,8 @@ databases: []
 # camelCase format.
 # Set identity on a user to match the identity in its client TLS certificate.
 # Set authType on a user to override the general authType setting.
+# Set serverIamAssumeRole to an IAM role ARN to assume for RDS IAM authentication
+# when serverAuth is rds_iam.
 users: []
 
 # mirrors contains a list of databases to replicate traffic from/to.